Root Cause

The organization's network firewall is blocking outbound connections to the required TrendAI AI Secure Access (ZTSA) proxy and authentication FQDNs/IP addresses. The Secure Access Module relies on proxy.ztsa-iag.trendmicro.com on TCP port 80 as its Internet Access Gateway proxy, and on auth.us.ztsa-iag.trendmicro.com and auth.ztsa-iag.trendmicro.com on TCP ports 80 and 443 for authentication and health check validation. Because the firewall is blocking these destinations, the module is unable to complete the proxy gateway health check, causing it to enter the InvalidProxyGateway state and report Disconnected in the Vision One console.

Resolution

Add firewall allow rules for the required TrendAI ZTSA FQDNs and their associated IP addresses.

If the issue persists after completing the steps above, please contact TrendAI Support for further assistance.